Konica Minolta bizhub C258 bizhub C368/C308/C258 Security Operations User Manu - Page 9

bizhub C368/C308/C258

1-5

1.1

Introduction

1

2.

After this machine is installed, refer to the Service Manual and perform the following steps.

Check that the Fax Kit has been mounted and set up properly, if fax functions are to be

used.

After the installation, conduct transmission and reception tests to make sure that the Fax

Kit has been mounted and set up properly.

Let the machine read the Custom Function Pattern Selection setting file

XXX_v1.0_ISO15408.cpd.

Get the administrator of the machine to confirm that [ISO15408] is selected for [Send/Save]

of [Custom Function Pattern Selection] in the Administrator Settings and obtain his or her

consent not to change the setting.

Check that the model name and the Firmware version (card version) checked with the Ser-

vice Manual agree with the value shown on the Firmware version display screen.

Check also that the MFP model name and the part numbers of the MFP board and the

eMMC board agree with those described in the Service Manual.

If there is a mismatch in the Firmware version number, explain to the administrator of the

machine that upgrading of the Firmware is necessary and perform upgrading of the Firm-

ware.

Set CE Authentication to [ON] and set the CE Password.

Make the service settings necessary for the Enhanced Security Mode.

3.

After this machine is installed, refer to this User’s Guide and perform the following steps.

Check that the Administrator Password has been set by the administrator of the machine.

Check that the Encryption Key has been set by the administrator of the machine.

Check that the Overwrite HDD Data has been set by the administrator of the machine.

Check that User Authentication has been set to [ON (MFP)], [External Server Authentica-

tion] (Active Directory only), or [Main + External Server] (Active Directory only) by the ad-

ministrator of the machine.

Check that the date and time have been correctly set in the machine by the administrator

of the machine.

Check that the Job Log Settings (Audit Log) has been set to [Yes] by the administrator of

the machine.

Check that the certificate for SSL communications has been registered by the administra-

tor of the machine.

In accordance with the security policies of the organization, register the certificate that is

issued by a reliable authentication authority.

Check that the ID & Print Settings has been set to [ON] by the administrator of the machine.

Check that the Memory RX Setting has been set to [Yes] by the administrator of the ma-

chine.

Check that IPsec has been set by the administrator of the machine for communications

between the machine and the external authentication server.


between the machine and the DNS server.


between the machine and the SMTP server.

Let the administrator of the machine set Enhanced Security Mode to [ON].

Check that the FW Update (USB) Password has been set by the administrator of the ma-

chine.

Check that the various functions to be disabled manually have been properly disabled by

the administrator of the machine.

The languages, in which the contents of the User’s Guide Security Operations have been

evaluated, are Japanese and English.

The following lists the manuals compatible with bizhub C368/bizhub C308/bizhub C258/

bizhub C236DN/bizhub C230DN/bizhub C225DN/ineo

+

368/ineo

+

308/ineo

+

258

(Version: G00-83).

•

bizhub C368/C308/C258 User’s Guide v1.00 A7PU-9580BA-00

•

bizhub C368/C308/C258 User’s Guide Security Operations 2016. 5 Ver. 1.01

Section	Page
Contents	2
1 Security	6
1.1 Introduction	6
Administrators	6
Compliance with the ISO15408 Standard	6
Operating Precautions	6
INSTALLATION CHECKLIST	8
1.2 Security Functions	11
Check Count Clear Conditions	11
1.3 Precautions for Operation Control	13
Roles of the Owner of the Machine	13
Roles and Requirements of the Administrator of the machine	13
Password Usage Requirements	13
External authentication server control requirements	14
Security function operation setting operating requirements	14
Operation and control of the machine	14
Machine Maintenance Control	16
Precautions for using the printer driver	16
1.4 Miscellaneous	17
Password Rules	17
Precautions for Use of Various Types of Applications	18
Encrypting communications	18
Print functions	18
IPP printing	19
Items of Data Cleared by Overwrite All Data Function	19
Fax functions	20
USB keyboard	20
Different types of boxes	20
Hardware and software used in the machine	21
Firmware integrity verification function	21
IPsec setting	21
CS Remote Care function	21
Terminating a Session and Logging out	22
Authentication error during external server authentication	22
2 Administrator Operations	24
2.1 Accessing the Administrator Mode	24
2.1.1 Accessing the Administrator Mode	24
2.1.2 Accessing the User Mode	30
2.2 Enhancing the Security Function	34
2.2.1 Items cleared by HDD Format	36
2.2.2 Setting the Password Rules	37
2.2.3 Setting the Enhanced Security Mode	39
2.3 Protecting Machine from Illegal Firmware Update	42
Setting the FW Update (USB) Password	42
2.4 Preventing Unauthorized Access	43
Setting Prohibited Functions When Authentication Error	43
2.5 Canceling the Operation Prohibited State	45
Performing Release Setting	45
2.6 Setting the Authentication Method	47
2.6.1 Setting the Authentication Method	47
2.6.2 Setting the External Server	50
2.7 ID & Print Setting Function	53
Setting ID & Print	53
2.8 System Auto Reset Function	55
Setting the System Auto Reset function	55
2.9 User Setting Function	57
Making user setting	58
2.10 Account Track Setting Function	63
Making account setting	63
2.11 User Box Function	68
2.11.1 Setting the User Box	68
2.11.2 Changing the user/account attributes and box password	73
2.11.3 Setting Memory RX	78
2.12 Changing the Administrator Password	81
Changing the Administrator Password	81
2.13 Protecting Data in the HDD	84
2.13.1 Setting the Encryption Key (encryption word)	84
2.13.2 Changing the Encryption Key	88
2.13.3 Setting the Overwrite HDD Data	90
2.14 Overwrite All Data Function	92
Setting the Overwrite All Data function	92
2.15 Obtaining Job Log	95
2.15.1 Obtaining and deleting a Job Log	95
2.15.2 Downloading the Job Log data	97
Job Log data	99
2.16 Setting time/date in machine	106
2.16.1 Setting time/date	106
2.16.2 Setting daylight saving time	109
2.17 SSL Setting Function	111
2.17.1 Device Certificate Setting	111
2.17.2 SSL Setting	113
2.17.3 Removing a Certificate	114
2.18 TCP/IP Setting Function	115
2.18.1 Setting the IP Address	115
2.18.2 Registering the DNS Server	116
2.19 AppleTalk Setting Function	117
Making the AppleTalk Setting	117
2.20 E-Mail Setting Function	118
Setting the SMTP Server (E-Mail Server)	118
3 User Operations	120
3.1 User Authentication Function	120
3.1.1 Performing user authentication	120
3.1.2 Accessing the ID & Print Document	124
3.2 Change Password Function	126
Performing Change Password	126
3.3 Secure Print Function	129
Accessing the Secure Print Document	129
3.4 User Box Function	132
3.4.1 Setting the User Box	132
3.4.2 Changing the user/account attributes and box password	137
3.4.3 Accessing the User Box and User Box file	143
4 Application Software	148
4.1 Data Administrator	148
4.1.1 Accessing from Data Administrator	148
4.1.2 Setting the user authentication method	151
4.1.3 Changing the authentication mode	152
4.1.4 Making the user settings	154
4.1.5 Making the account settings	155
4.1.6 DNS Server Setting Function	156
4.1.7 AppleTalk Setting Function	157

Konica Minolta bizhub C258 bizhub C368/C308/C258 Security Operations User Manu - Page 9

Check that User Authentication has been set to [ON MFP], [External Server Authentica

Page 9 highlights